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Abstract 

Like any other logical theory, action theories in reason- 
ing about actions may evolve, and thus need revision 
methods to adequately accommodate new information 
about the behavior of actions. Here we give a semantics 
that complies with minimal change for revising action 
theories stated in a version of PDL. We give algorithms 
that are proven correct w.r.t. the semantics for those the- 
ories that are modular. 



Introduction 

In logic-based approaches to reasoning about actions, theo- 
ries are collections of statements of the form: "if context, 
then effect after every execution of action" (effect laws); 
and "if precondition, then action executable" (executabil- 
ity laws). For example, in Propositional Dynamic Logic 
(PDL) (Ffarel, Tiuryn, and Kozen 2000), one could have the 
law {~<Pi A-ip 2 ) — * [ a ]Pi> saying that in every context where 
_1 PiA-ip 2 i s the case, after every execution of action a we get 
the effect/^; and (p 1 V ~~ip 2 ) ~~ > ( a )T, stating that/^ V ->p 2 
is a sufficient condition for a's executability. 

These are examples of what we call action laws, as they 
specify the behavior of the actions of a given domain. Be- 
sides that we can also have laws mentioning no action at 
all (static laws). They characterize the underlying structure 
of the world, i.e., its possible states. For instance, having 
Pi ~ y Pi as a static law would mean p 1 A -ip 2 is a forbidden 
state. Action theories will then be collections of laws, each 
of them seen as a global axiom in PDL. 

Well, it may happen that such descriptions have to be re- 
vised due e.g. to new incoming information about the be- 
havior of the world. In our example, we may learn that the 
only valid states are those satisfying p l f\p 2 , or that action a 
has always ->p 2 as outcome in -i/? 2 -contexts, or even that/^ 
is enough to guarantee a's executability. Here we are inter- 
ested in this kind of theory change. 

The contributions of the present work are as follows: 

• What is the semantics of revising an action theory Tby a 
law <?? How to get minimal change, i.e., how to keep as 
much knowledge about other laws as possible? 
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• How to syntactically revise an action theory so that its 
result corresponds to the intended semantics? 

Here we answer these questions. 

Logical Preliminaries 

Action Theories in Dynamic Logic 

Our base formalism is PDL without the * operator. Let 
2lct = {ai,a2, . • .} be the set of atomic actions of a do- 
main. To each a there is associated a modal operator [a]. We 
suppose our multimodal logic is independently axiomatized, 
i.e., the logic is a fusion and there is no interaction between 
the modal operators (Kracht and Wo Iter 1991). 

*Pcop = {pi,P2i ■ ■ ■} denotes the set of all propositional 
constants or atoms. The set of literals is £it = {£\, £2, . . .}, 
where each £4 is either/? or -p, for some/? £ *}3top. In case 
£ = -<p, we identify ->£ with p. By \£\ we will denote the 
atom in literal £. 

By tp, xj), . . . we denote Boolean formulas, examples of 
which are p 1 — > p 2 and ->p 1 © p 2 . i?tnl is the set of all 
Boolean formulas. A propositional valuation v is a maxi- 
mally consistent set of literals. We denote v lh tp the fact 
that v satisfies tp. val(tp) is the set of all valuations satisfy- 
ing tp. \= denotes the classical consequence relation. 

With IP(tp) we denote the set of prime implicants (Quine 
1952) of tp. By n we denote a prime implicant, and atm(ir) 
is the set of atoms occurring in it. For given £ and n, £ £ it 
abbreviates '£ is a literal of it'. 

We denote complex formulas (with modal operators) by 
$, \P, . . . (a) is the dual operator of [a], ((a)# =def -"[a]-^). 
An example of a complex formula is (p 1 A (p 2 V -ip 3 )) — > 
HhPi Vp 3 ). 

A PDL-model is a tuple ^# = (W,R) where W is a set 
of valuations, and R maps action constants a to accessibility 

relations R a C W x W. Given a model ^t ', \= p (p is true at 

1 w 

world w of model ^#) if w lh p; \= [a|<Pif|= <P for every w' 

1 w w' 

s.t. (w, w') £ fi s ; truth conditions for the other connectives 
are as usual. By M. we will denote a set of PDL-models. 

^# is a model of <P (noted \= <P) if and only if \= <P for all 

1 w 

w £ W. ^# is a model of a set of formulas S (noted |= S) 
if and only if |= <? for every <1> £ S. <P is a consequence of 



the global axioms S in all PDL-models (noted E |= <P) if 

and only if for every „.#, if \= S, then \= <P. 

With PDL we can state laws describing the behavior of 
actions. Following the tradition in the reasoning about ac- 
tions community, we here distinguish three types of them. 

Static Laws A static law is a formula ip £ 3ml. It charac- 
terizes the possible states of the world. The set of all static 
laws of a domain is denoted by <S. 

Effect Laws An effect law for a is of the form ip — > [a\ip, 
where ip, ip £ 3ml. Effect laws relate an action to its effects, 
which can be conditional. The consequent tp is the effect 
which always obtains when a is executed in a state where 
the antecedent ip holds. If a is a nondeterministic action, 
then ip is typically a disjunction. If tp is inconsistent we have 
a special kind of effect law that we call an inexecutability 
law. For example, (~<Pi A p 2 ) — > [a] J- says that a cannot be 
executed (there is no a-transition) in ->p 1 A/? 2 -contexts. The 
set of effect laws of a domain is denoted by £ . 

Executability Laws An executability law for a has the form 
ip — > (a)T, with ip £ 3ml. It stipulates the context in which 
a is guaranteed to be executable. (In PDL, the operator (a) is 
used to express executability, (a)T thus reads "a's execution 
is possible".) The set of all executability laws of a domain 
is denoted by X . 

Action Theories T=iSU£U,Yisan action theory. 

Given an action a, £ a (resp. X a ) will denote the set of 
only those effect (resp. executability) laws about a. For the 
sake of clarity, we here abstract from the frame and rami- 
fication problems, and assume Tcontains all frame axioms 
(cf. (Herzig, Perrussel, and Varzinczak 2006) for a contrac- 
tion approach within a solution to the frame problem). 

Elementary Atoms and Prime Valuations 

Given ip £ 3ml, E(ip) denotes the elementary atoms actu- 
ally occurring in ip. For example, E(->p 1 A (~>Pi Vp 2 )) = 
{/? 1 ,/? 2 }- An atom/? is essential to ip if and only if p £ E(ip') 
for every ip' such that |= ip <-> ip' . For instance, p 1 is es- 
sential to -<p l A (~>Pi Vp 2 ). E!(ip) will denote the essential 
atoms of ip. (If ip is not contingent, i.e., it is a tautology or a 
contradiction, then E!(ip) = 0.) 

For ip £ 3ml, ip* is the set of all ip' £ 3ml such that 
ip \= ip' an&E(ip') C E!{ip). For instance, p 1 V p 2 (fi P\*, 
as Pi ^pl^i V P2 butE(p 1 V p 2 ) £ E.'ip^). Moreover 
E(ip*) = E!(ip*), and whenever |= ip <-> ip' , E!(ip) = 
E!(ip') and also ip* = ip'*. 

Theorem 1 (Least atom-set theorem (Parikh 1999)) 

|=. ip <-> f\ ip*, and E(tp*) C E(ip') for every ip' s.t. 

F^p L ^ <-► f'- 

Thus for each ip £ 3ml there is a unique least set of elemen- 
tary atoms such that ip may equivalently be expressed using 
only atoms from that set. ' 



'The dual notion (redundant atoms) is addressed in (Herzig and 
Rifi 1999), with similar purposes. 



Given a valuation v, v' C v is a subvaluation. For W a set 
of valuations, a subvaluation v' satisfies ip £ 3ml modulo W 
(noted v' lb, ip) if and only if v lb ip for all v £ W such that 
v' C v. A subvaluation v essentially satisfies ip (modulo W), 
noted v lb ip, if and only if v lb, ip and {\t\ : £ £ v} C 

E!(ip). If v lb' ip, we call v an essential subvaluation of ^ 
(modulo W). 

Definition 1 Let ip £ 3ml and W be a set of valuations, v is 
a prime subvaluation of ip (modulo W) if and only ifv lb ip 

and there is no v' C v s.t. v' lb ip. 

Prime subvaluations of a formula ip are the weakest states 
of truth in which ip is true. They are just another way of 
seeing prime implicants of ip. By base(ip, W) we denote the 
set of all prime subvaluations of ip modulo W. 

Theorem 2 Let ip £ 3ml and W be a set of 'valuations. Then 
for all w £ W, w lb ip if and only ifw lb \/ rebase ^ tW) f\ t& I 

Closeness Between Models 

When revising a model, we will perform a change in its 
structure. Because there can be several different ways of 
modifying a model (not all of them minimal), we need a no- 
tion of distance between models to identify those that are 
closest to the original one. 

As we are going to see in more depth in the sequel, chang- 
ing a model amounts to modifying its possible worlds or 
its accessibility relation. Hence, the distance between two 
PDL-models will depend upon the distance between their 
sets of worlds and accessibility relations. These here will be 
based on the symmetric difference between sets, defined as 
X-Y = (X\Y)U(Y\X). 

Definition 2 Let Jt = (W,R) be a model. Jt' = (W,R') 
is as close to Jt as Jf," = (W",R"), noted J(' <j( J(" , 
if and only if 

• either W-W 1 C W-W" 

• or W-W' = W-W" andR-R' C R-R" 

(Notice that other distance notions are also possible, like 
e.g. considering the cardinality of symmetric differences.) 

Semantics of Revision 

Contrary to action theory contraction (Varzinczak 2008a), 
where we want the negation of some law to become satis- 
fiable, in revision we want to make a new law valid. This 
means that one has to eliminate all cases satisfying its nega- 
tion. This depicts the duality between revision and contrac- 
tion: whereas in the latter one invalidates a formula by mak- 
ing its negation satisfiable, in the former one makes a for- 
mula valid by forcing its negation to be unsatisfiable prior to 
adding the new law to the theory. 

The idea behind our semantics is as follows: we initially 
have a set of models M. in which a given formula <1> is (po- 
tentially) not valid, i.e., <2> is (possibly) not true in every 
model in A4. In the result we want to have only models of 
<&. Adding <£-models to A4 is of no help. Moreover, adding 



models makes us to lose laws: the corresponding resulting 
theory would be more liberal. 

One solution amounts to deleting from M. those models 
that are not <£-models. Of course removing only some of 
them does not solve the problem, we must delete every such 
a model. By doing that, all resulting models will be mod- 
els of <Z>. (This corresponds to theory expansion, when the 
resulting theory is satisfiable.) However, if M. contains no 
model of <P, we will end up with 0. Consequence: the result- 
ing theory is inconsistent. (This is the main revision prob- 
lem.) In this case the solution is to substitute each model 
^K in M. by its nearest modification ^#J that makes <I> true. 
This lets us to keep as close as possible to the original mod- 
els we had. But, what if for one model in M. there are several 
minimal (incomparable) modifications of it validating <2>? In 
that case we shall consider all of them. The result will also 
be a list of models M$, all being models of <[>. 

Before defining revision of sets of models, we present 
what modifications of (individual) models are. 

Revising a Model by a Static Law 

Consider the model depicted in Figure 1, and suppose we 
want to revise it by the Boolean formula p 1 Vp 2 , i.e., we 
want such a formula to be a static law. 



O^O 




Figure 1: A model where -ip 1 A -p 2 is satisfiable. 



world. If no arrow arrives at this new world, what about the 
intuition? Do we want to have an unreachable state? 

All this discussion shows how drastic a change in the 
static laws may be: it is a change in the underlying struc- 
ture (possible states) of the world! Changing it may have as 
consequence the loss of an effect law or an executability law. 

The tradition in the reasoning about actions community 
says that executability laws are, in general, more difficult 
to state than effect laws, and hence are more likely to be 
incorrect. By adding no arrow to the resulting model we here 
comply with that and postpone correction of executability 
laws, if needed (cf. (Herzig, Perrussel, and Varzinczak 2006; 
Varzinczak 2008a)). 

The semantics for revision of one model by a static law is 
as follows: 

Definition 3 Let J6 = (W,R). JZ' = {W,R') G JZ* if 
and only if: 

• W' = (W\ val(-^ip)) U val(tp) 

• R' CR 

Clearly |= cp for each ^C' G ^ZZ. The minimal models 
resulting from revising a model ^SC by tp axe those closest to 
JZ w.r.t. <j(: 

Definition 4 revise (^C, ip) = \J min{^#*, ^^#} 

Revising a Model by an Effect Law 

Let our language now have three atoms and consider the 
model ./# in Figure 2. 



fl Q^- 



^y 



►(-■flilo, P 3 ) 



In such a model, we do not want the formula ->p 1 A -p 2 
to be satisfiable, so the first step is to remove all worlds in 
which it is true. The second step is to guarantee that all 
the remaining worlds satisfy the new law. Such an issue 
has been largely addressed in the literature on propositional 
belief base revision and update (Gardenfors 1988; Winslett 
1988; Katsuno and Mendelzon 1992; Herzig and Rifi 1999). 
Here we can achieve that with a semantics similar to that 
of classical operators: basically one shall change the set of 
possible valuations, by removing or adding worlds. 

The delicate point in removing worlds is that we may 
lose some executability laws: in the example, removing 
{-i/? 1; -i/? 2 } also removes p 2 — > («)T. From a semantic 
point of view, this is intuitive: if the state of the world to 
which we could move is no longer possible, then we do not 
have a transition to that state anymore. Hence, if that transi- 
tion was the only one we had, it is natural to lose it. 

Similarly, one could ask what to do with the accessibil- 
ity relation if new worlds are added (when expansion is not 
possible): shall new arrows leave/arrive at the new world? If 
no arrow leaves the new added world, we may lose an exe- 
cutability law. If some arrow leaves it, we may lose an effect 
law, the same holding if we add an arrow pointing to the new 



Figure 2: A model where p 1 A (a)p 2 is satisfiable. 



(Notice that |= p 2 — > Pi ©P3.) Suppose we want to revise 
./# by p x — > [a]->p 2 - This means that we should guarantee 
the formula p 1 A {a}p 2 is satisfiable in none of its worlds. To 
do that, we have to look at the worlds satisfying it (if any) 
and either make p 1 false, or make {a)p 2 false by removing 
a-arrows leading to /> 2 ~ wor lds. 

In our example, the worlds {p ll ->p 2 , "^3} and 
{p\,p 2 T~ , p^\ satisfy p 1 A (a)p 2 and both have to change. 
Flipping p 1 would do the job but also has as consequence the 
loss of a static law: we would violate /? 2 ~~ * Pi ®Ps- Here we 
think that changing action laws should not have as side effect 
a change in the static laws. Given their special status, these 
should change only if explicitly required (see above). In this 
case, each world satisfying p x A (a)p 2 has to be changed 
so that {a)p 2 is no longer true in it. In our example, we 
should remove the arrows ({p x , ->p 2 , ^p 3 }, {-'Pi,p 2 ,P3}) 
and ({p x ,p 2 , -7> 3 }, {px,p 2 , -P3}). 



The semantics of one model revision for the case of a new 
effect law is: 

Definitions Let Ji = (W,R). Ji' = (W,R ! ) G -#*^ [j# 
if and only if: 

• W' = W 

• R' CR 

• If (w, w') G R\R , then \= tp and \= —>%b 
j \ i / \ i w r i w , 

• h f -> [<# 

The minimal models resulting from the revision of a 
model ^# by a new effect law are those that are closest to 
J( w.r.t. -<jf. 

Definition 6 Let *M be a model and tp — > [a]ip an effect law. 
Then revise{Ji ', tp -> [a]ip) = \Jmhx{^*^ a ^, <^}- 

Revising a Model by an Executability Law 

Let the model depicted in Figure 3 and suppose we want to 
revise it by the new executability law p 1 — > (a)T. 




Figure 3: A model where p 1 A [a]_L is satisfiable. 

Observe that -i(p 1 —> (a)T) is satisfiable in ^#, hence we 
must throw p 1 A [a] JL away to ensure the new formula is true. 
To remove p 1 A [a]_L we have to look at all worlds satisfying 
it and modify ^M so that they no longer satisfy the formula. 
Given world {p 1 , _l /? 2 }' we have two options: change the in- 
terpretation of p 1 or add a new arrow leaving this world. A 
question that raises is 'what choice is more drastic: change a 
world or an arrow'? Again, here we think that changing the 
world's content (the valuation) is more drastic, as the exis- 
tence of such a world was foreseen by some static law and is 
hence assumed to be as it is, unless we have information sup- 
porting the contrary (see above). Thus we shall add a new 
a-arrow from {p 1 , _, /? 2 }- Having agreed on that, the issue 
now is: to which world should the new arrow point? Four 
options show up: point the arrow to {pi,P2}, {Ti;/^}' 
{—*Pl, ^2} or {Pii ^2} itself. The resulting model is such 
that the unwanted formula is unsatisfiable and p 1 —> (fl)T 
holds in all its worlds. 

Whereas all these options make the new law true in 
the resulting model, not all of them comply with minimal 
change. To witness, putting an a-arrow from j/?!, -1 /^} 
to {~ I P\ 1 ~'P2\ or {Pi? -1 /^} makes us lose the effect law 
-i/7 2 ~~ * [ fl ]/ ? 2' an d pointing it to j -1 /?!,/^} a ^ so deletes from 
the model p 1 — > [a\p lm Note that these laws are preserved 
if we point the arrow to {p\,P2\- What would support the 
choice for the latter? 



When pointing a new arrow leaving a world w we want 
to preserve as many effects as we had before doing so. To 
achieve this, it is enough to preserve old effects only in w 
(because the remaining structure of the model remains un- 
changed after adding this new arrow). The operation we 
must carry out is to observe what is true in w and in the 
candidate target world w': 

• What changes from w to w' (w' \ w) must be what is 
obliged to do so. 

• What does not change from w to w' (wOw 1 ) must be what 
is either obliged or allowed to do so. 

This means that every change outside what is forced to 
change is not an intended one. In our example, when putting 
the a-arrow from {pi, -1 /^} to { _, / ? ii/ ? 2J'' "'Pi becomes a 
possible effect of a. As far as ->p 1 is never caused by a, 
there is no justification for having it in a target world of 
\Pli _, / ? 2}- Similarly, we want the literals preserved in the 
target world to be at most those that either are consequences 
of some effect or are usually preserved in that context. Ev- 
ery preservation outside those may make us lose some law. 
For instance, when putting the new a-arrow from {p 1 , ->p 2 } 
to {->Pi, ~7?2}' _, / ? 2 i s preserved. Because ->p 2 is not a nec- 
essary effect of a and is moreover never preserved across a's 
execution (in _#), there is no reason to preserve it in this 
new a-transition. 

This looks like prime implicants, and that is where prime 
subvaluations play their role: the worlds to which the new 
arrow shall point are those whose difference w.r.t. the depart- 
ing world are literals that are relevant, and whose similarity 
w.r.t. it are literals that we know do not change. 

Before giving a formal definition for that, we need to con- 
sider two important issues: First, when checking satisfac- 
tion of these two conditions, looking just at what is true in 
the model ^ we want to modify is not enough. It can be 
a model in which a contingent, i.e., not true in all models 
formula is true. Hence we shall consider all the models in 
Ai. Second, if a is never executable in w, i.e., R a (w) = 
for every ^£ = {W, R) G M, then lots of effects for a triv- 
ially hold in w, and then not all of them should be taken into 
account in deciding what has to be changed or preserved. In 
this case, one should instead look at the effects that hold for 
those worlds w such that R a (w) =/= (because everything 
that holds in these worlds also holds trivially in those worlds 
with no transition by a). 

Definition 7 Let J( = (W,R) be a model, w, w' G W, M 
a set of models such that ./# G M, and ip — > (a) T an 
executability law. Then w' is a relevant target world of w 
w.r.t. tp — > (a)T for ./# in A4 if and only if: 



• \= p 

• If there is „ 



= (W',R') G M such thatR' a {w) ± 0: 

- for all t G w \w, there is ip' G 3ml s.t. there is v G 
base(ip', W) s.t. v' C w', £ G v', and for every Mi G 

M, ^[aW 

1 w L J 

- for all £ G w f~l w' , either there is ip' G ^mt s.t. there 
is v 1 G base(ip' ,W) s.t. v' C w', £ G v', and for all 

^£i G M, \= * [a]*!)'; or there is JZi G M s.t. \^ z [a}^£ 



• IfR' a (w) = $ for every JZ' = {W',R') G M: 

- for all £ e w' \w, there is ,£i = (Wi,R{) G M s.t. 
there is u,v £ Wi s.t. (u, v) G Rt a and £ G v \ u 

- for all £ G w n w', there is Jd = (Wi,Ri) G M s.t. 
there is u,v G Wi s.t. (u,v) G Ri a and £ G u C\ v, 
or for all Mi = (Wi,Ri) G A4, if(u,v) G Ri a , then 
-<£ £ v \ u 

By RelTgt{w,ip — > (a)T,^#, A4) we denote the set of all 
relevant target worlds ofw w.r.t. tp — > (a)T for „# in A4. 

The semantics of one model revision by a new executabil- 
ity law is given by: 

Definitions Let Jt = (W,R). JC' = (W',R') G 

•^^(o)T if and only if: 

• W' = W 

• RCR' 

• If (w,w') G R' \ R, then w' G 
RelTgt(w, tp -s- (a)T, J(, M) 

• \= <p -> (fl)T 

The minimal models resulting from revising a model ^SC 
by anew executability law are those closest to ^# w.r.t. -<jf. 

Definition 9 Let ,/M be a model and tp — > (a)T be 
an executability law. Then revise{^M , ip 



U: 



V ^(a)T 



,<M\ 



(a)T) 



Revising Sets of Models 

Now we are ready to define revision of a set of models M. 
by a new law <P: 

Definition 10 Let M be a set of models and <P a law. Then 



Ml 



M \ {J( :p^}, if there is J( G M s.t. \= & 

U^ eM revise(^, ( l>), otherwise 

Observe that Definition 10 comprises both expansion and 
revision: in the first one, simple addition of the new law 
gives a satisfiable theory; in the latter a deeper change is 
needed to get rid of inconsistency. 

Syntactic Operators for Revision 

We now turn our attention to the syntactical counterpart of 
revision. Suppose we have an action theory Tand a law <1> we 
want to revise Twith. If TU {<?} is satisfiable, adding <1> to 
T(expansion) will do the job. Otherwise, if TU {<£>} \= ±, 
then we have to modify the laws in Tto accommodate with 
the new incoming law (proper revision). Our endeavor here 
is to perform minimal change at the syntactical level. By 1% 
we denote the result of revising Twith <P. 

Revision by a Static Law 

Looking at the semantics of revision by Boolean formulas, 
we see that revising an action theory by a new static law 
may conflict with the executability laws: some of them may 
be lost and thus have to be changed as well. The approach 
here is to preserve as many executabilities as we can in the 
old possible states. To do that, we look at each possible 



valuation that is common to the new S and the old one. Ev- 
ery time an executability used to hold in that state and no 
inexecutability holds there in the new theory, we make the 
action executable in such a context. For those contexts not 
allowed by the old S, we make a inexecutable (cf. the se- 
mantics). Algorithm 1 deals with that (<S * ip denotes the 
classical revision of S by tp using any standard method from 
the literature (Winslett 1988; Katsuno and Mendelzon 1992; 
Herzig and Rifi 1999)). 

Algorithm 1 Revision by a static law 

input: T, <p 
output: T^ 

ifTuM^ ± then 

T v : = TU M 
else 

S': = S*<p, E': = E, X' : =0 

for all tv elP(S') do 
for all A C atm(n) do 

if 5' ^ pl (7tA^a)-> -Lthen 

if 5 ^ pL (7rAv? A )^±then 

ifT^ DL (7rAv9 A ) -» (a)T smAS',e',X ^ DL 
— i(7r A ip A ) then 

XJ : = {(ifi A tv A ip A ) -> (a)T : tp t -> (a)T G 

Xa} 

else 

£': = £' U {(tt A tp A )^ [a]±} 
T: = 5'U£'UA" 



Revision by an Effect Law 

When revising a theory by a new effect law f — > [a]ip, we 
want to eliminate all possible executions of a leading to -in- 
states. To achieve that, we look at all (^-contexts and every 
time a transition to some -i'0-context is not always the case, 



T ^ ip — > (a) -iij), we can safely force [a]ip for that 
context. On the other hand, if in such a context there is al- 
ways an execution of a to -iip, then we should strengthen the 
executability laws to make room for the new effect in that 
context we want to add. Algorithm 2 below does the job. 

Revision by an Executability Law 

Revising a theory by a new executability law will have as 
immediate consequence a change in the set of effect laws: 
all those laws preventing the execution of a shall be weak- 
ened. Besides that, in order to comply with minimal change, 
we shall ensure that in all models of the resulting theory 
there will be at most one transition by a from those worlds 
in which Tprecluded a's execution. 

Let Sf ,y - denote a minimum subset of £ a such that 
SjS^' 1 - \= ip — > [a]-L In the case the theory is modu- 
lar (Herzig and Varzinczak 2005) (see further), interpolation 
guarantees that this set always exists. Moreover, note that 
there can be more than one such a set, in which case we 
denote them {£%> L )i : ..., (^'- L )«. Let 
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Algorithm 2 Revision by an effect law 



input: T, tp — > [a\ip 
output: 7£_ [oW 

ifTu{tp^ [a]ip} ^ DL _Lthen 

else 

T': = T 

for all tt G /P(5 A tp) do 
for all A C atm(n) do 

^ : = A Pi eS^)Pi A KeS^J^Pi 

if 5 ^(ttA^a)^ _Lthen 
for all tt' G /P(5 A -.^) do 
if T' HsdlC 71 " a V-0 ->■ ( a ) 7r ' then 



(r \ a-;,) u 

T':= {(v<A-.(7tA<Pa)) 



(a)T 



T':=T'U{(7TA^)^ [a]-!/)} 
if T' ^ dl (tt A <p A ) -> [a]± then 

T': = T'\J{(tpiAirAtp A ) -> (a)T : ^ -> (a)T £ 



^o-»[a]-0 : ~~ ^ 



The effect laws in £~ will serve as guidelines to get rid of 
[a]_L in each (/3-world allowed by the theory: they are the 
laws to be weakened to allow for (a)T. 

The idea behind our algorithm is as follows: to force 
tp — > (a)T to be true in all models of the resulting theory, 
we visit every possible ^-context allowed by it and make the 
following operations to ensure (a)T is the case for that con- 
text: Given a 99-context, if T not always precludes a from 
being executed in it, we can safely force («}T without mod- 
ifying other laws. On the other hand, if a is always inexe- 
cutable in that context, then we should weaken the laws in 
£~. The first thing we must do is to preserve all old ef- 
fects in all other (^-worlds. To achieve that we specialize the 
above laws to each possible valuation (maximal conjunction 
of literals) satisfying tp but the actual one. Then, in the cur- 
rent (^-valuation, we must ensure that action a may have any 
effect, i.e., from this i^-world we can reach any other pos- 
sible world. We achieve that by weakening the consequent 
of the laws in £~ to the exclusive disjunction of all possi- 
ble contexts in T. Finally, to get minimal change, we must 
ensure that all literals in this (^-valuation that are not forced 
to change are preserved. We do this by stating a conditional 
frame axiom of the form (tpk A I) — > [a]£, where tpk is the 
above ^-valuation. 

Algorithm 3 gives the pseudo-code for that. 

Correctness of the Algorithms 

Suppose we have two atoms p 1 and/? 2 , and only one action 
a. Let the action theory T\ = {~<P2iPi ~ > [ a ]P2-> ( a )T}. 
The only model of T\ is ./£ in Figure 4. Revising such a 
model by p t V p 2 gives us the models „-#/, 1 < i < 3, in 
Figure 4. Now, revising T\ by p 1 V p 2 will give us T\* Vp = 
{Pi A T2j,Pi ~~ * M/^}- The only model of T\* Vp is Ji[ 



Algorithm 3 Revision by an executability law 

input: T, tp — > (a)T 
output: T^ (a)T 

ifTu{tp^ {a}T} ^ DL -Lthen 

else 

T': = T 

for all ty G IP(S A tp) do 
for all A C atm{n) do 

itS ^ PL (7T A tp A ) -> 1 then 

ifT' tp DL {ir A <p A ) -> [a] ± then 

(r'\s'-)u 

{(tpi A — i(7r A tp A )) — > [a]ipi : 

j' . _ <Pi -> [a]tpi G £",7 } U 

{{tpi A tt A tp A ) -> [a] „/ e/p(s) (tt' A <p A >) 



tp, -» [a]Vn G £"„ } 



*'£•»(»') 



for all L C £it do 

if 5 ^ pl (tt A ¥»„)-> A* ei "hen 
for all £ G L do 

ifT M D H? -> [a]±or(T& L £ -► 
andT^ DL ^ -> [a] £) then 

T" : = T' U {(tt A (^ A £) -> [a]^} 
T': = T'U{(tt A ¥>„)-► {«)T} 



'a]->£ 



"K^W)t '■- T ' 



in Figure 4. This means that the semantic revision produces 
models (viz. ^ 2 an d -^3 in Figure 4) that are not models of 
the revised theories. 



Q 



o^o 



?•{: 



(/'1 . ^2) 



OM 



Figure 4: The model ^# of Tand the semantic revision of 
J(byp 1 Wp 2 . 

The other way round, the algorithms may produce theo- 
ries whose models do not result from the semantic revision 
of some model of the original theory. As an example, con- 
sider 72 = {{pi Vp 2 ) ~~ * [ a ]J-i ( a )T}, whose only model is 
.M in Figure 4. The revision of ^# by p l V /? 2 is as above. 
However T 2 * iV/ , 2 = {Pi V P 2 >(Pl v ^2) -" I"]- 1 } has a 

models" = ({{pi, J p 2 }){jPi>~!P2}){ _ lPl)P2}}>0> that is 
noting* Vp2 . 

This happens because the possible states are not com- 
pletely characterized by the static laws in S . Fortunately 



we get the right result by requiring iS to be 'big enough'. 
This is connected with the principle of modularity (Herzig 
and Varzinczak 2005): 

Definition 11 (Modularity (Herzig and Varzinczak 2005)) 

Tis modular if and only if for every ip £ 5ml, ifT |= . ip, 
then S ^ pL ip. 

Under modularity, revision of models of Tby a law <? 
in the semantics produces models of the output of the algo- 
rithms 7j: 

Theorem 3 Let Tbe modular and <P be a law. For all mod- 
els Ji' , if \M' £ M%, for some M = {.£ :(= T], then 

Also under modularity, models of 7j result from revision 
of models of Tby <P: 

Theorem 4 Let Tbe modular and <P a law. For every -#', 

if\= 7%, then Jt 1 £ M.%, for some M = {.£ :\= 7}. 

In (Herzig and Varzinczak 2005) algorithms are given to 
check whether T satisfies the principle of modularity and 
also to make Tsatisfy it, if that is not the case. 

Modular theories have other interesting properties (Herzig 
and Varzinczak 2007): for example, consistency amounts to 
that of S; deduction of effect laws does not need the exe- 
cutability ones and vice versa; prediction of an effect of a 
sequence of actions a\ ; . . . ; a n does not need the effect laws 
for actions other than a±, . . . ,a n . This also applies to plan 
validation when deciding whether (a\; . . . ;a n }ip is the case. 

Conclusion and Perspectives 

Contrary to classical belief change, the problem of action 
theory change has only recently received attention in the 
literature, both in action languages (Baral and Lobo 1997; 
Eiter et al. 2005) and in dynamic logic (Herzig, Perrussel, 
and Varzinczak 2006; Varzinczak 2008a). 

Here we have studied what revising action theories by 
a law means, both in the semantics and at the syntactical 
level. We have defined a semantics based on distances be- 
tween models that also captures minimal change w.r.t. the 
preservation of effects of actions. With our algorithms and 
the correctness results under modularity we have established 
the link between the semantics and the syntax, and have also 
shown that the modularity notion is fruitful. Since modular- 
ity is preserved across revision (see Lemma 1 in the appen- 
dices), it has to be ensured only once during the evolution of 
the action theory. 

Here we presented the case for revision. In (Varzinczak 
2008a) we also define the contraction counterpart of ac- 
tion theory change. There we show that moreover our con- 
structions satisfy all Katsuno and Mendelzon's postulates for 
contraction (Katsuno and Mendelzon 1992). 

Our next step on the subject is to define a general frame- 
work in which to revise a theory by any formula of the 
language and not only laws. We believe that such a def- 
inition will use as basic operations semantic modifications 
like those we studied here (addition/removal of arrows and 
worlds). Hence our constructions will help us in better un- 
derstanding what revision by a general formula means. 
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Proof of Theorem 3 

Let <P be a law, J£' £ M %, and let 7j be the output of our 
algorithms on input theory Tand law <Z>. 

If TU {<£} ^ D| __L, then jg' £ M \ {Jt :\j^ $} and Jt> 
is a model of 7% = TU {^}. 

Let TU {<£} |= _L. We analyze each case. 

Let $ be some ip £ gm[. Then J£' = (W',R') where 
W' = (W\val(-itp))Uval(ip) is minimal w.r.t. WandR' C R 
is maximal w.r.t. R, for some Jt = (W, R ) £ M.. 



As we have assumed the syntactical classical revision op- 
erator -k is sound and complete w.r.t. its semantics and is 

moreover minimal, we have |= S -k ip. Because R' C R, 

\= £ . Thus it is enough to show that ^' is a model of the 
added laws. 

Given (pi A n A p A ) — > (fl)T G 7* , for every w G W 1 ', if 

|= tpt Air Atp A , then to G W(because<S b (7rA</? A ) — > -L)- 
From w lh </?i and <^i — > (a)T G Af fl , we have R a {w) =/= 0. 
Suppose R' a (w) = 0. As |= 5 * </? U £ and 7?' is maximal, 

every JC" = {W",R") s.t. \^" S * p U £ is s.t. Z^'O) = 
0, and then S * p U £ b (jr A p A ) — > [<z]-L Because 
T f= DL (tt A p A ) -> ( fl )T, and S b_ pL (tt A <p A ) -> JL and 
<5*<p ^plCttA^a) -> 1, weget<S*y>, £, <Y ^-.(ttA^), 
and then (^ A n A tp A ) -> (a)T ^ 7^. Hence /? a (w) 7^ 0, 

and |= ((/?i A tt A p A ) — > (fl)T. 

If (tt A 99 A ) -> [a}± G 7;, then 5 b_ p| _ (tt A y> A ) -> J_. 

Thus, for every w G W 1 , if |= 7r A <^ A , R' a (w) = and the 
result follows. 

Let <P now have the form p — > [a]ip, for tp, ip G 3m(. Then 
.M' = (W'.-R') for some JZ = (W,R) G M s.t. W' = W 
and 7?' C 7?, where R' is maximal w.r.t. R. 

From W' = W, ^ ' S. As /?' C R, \^' £. Because 
S U £ C 7* ^r a i,/,, it suffices to show that ./#' is a model of 
the added laws. 

By definition, (= 93 — > [a]^>, and then b (7r A <£ A ) — > 
[d\tp for every 7r G ZP(<S A y). 

If (pi A tt A p A ) -> (a)T G 7^^[ a ]^, then for every 
if G It , if w lh yjj A 7r A y) A , we have w lh <^j. As w G W, 
and ^ -> (a)T G A" fl , /? a (ti;) = 0. If R' a (w) = 0, then 
w 1 lh -i-i/; for every w' G R a (w). Thus as far as we added 
(tt A p A ) -> [a]V> to 7^ [fl])/ „ we must have 7£_>[ a ]^ |= D| _ 
(tt A <y9 A ) -> [a]±. Uencs R' a (w) ^ 0. 

Let fa A A^ DL (^A^)^( fl )^^( 7r A <Pa)) -» («>T G 

^-►w For ever y w £ w '' if ^ W A 

At^ttA**)-^,/' "■(* A **)» then ™ IH ^' and aS 

w; G W and tpi — > (a)T G A" a , we have /? a (w) 7^ 0. If 
R' a {w) = 0, because |= S A £ and /?' is maximal, every 
-#" = (W",R") s.t. (^"'5A£ is s.t. R'^w) = 0. Then 
5 ^ NWW^ W-L- But then T ^dlA^ ' -> W-U 
and as ^ -> (a)T G A^, T hp D| _-'(A£e^ ^ A P»)> and then 
u> ^ W, a contradiction. Hence R a (w) =/= 0. 

Finally, let <Z> be of the form </? — > (a) T, for some 1/3 G 
5ml. Then ^T' = (W',fl'} for some ^ = (W,R) G 7W s.t. 
W' = W and «' = R U /?^ T , with 

^' T = {( w ) w') : w ' G RelTgt(w, p> -+ (a)T, ^, X)} 

such that 7?' is minimal w.r.t. if. 

From W 7 = W, ^" 5. AsfiC /?', ^ A 1 . As far as 
S U X C 7*^/ \ T , it is enough to show that ^#' satisfies 
the added laws. 



By definition, \= p — > (a)T, and then \= (tt A p A ) — > 
(a)T for every 7r G //"(iS A </?). 

If (v?i A tt A ^a) -^ [«](^i V 7r> elp{s) (tt 7 A <p A /)) G 

.4'C o0 „("') 

^«j— ><a)T> men f° r every w G W 1 , if w lh pi A ir A (p A , 
then w lh yjj. Because \= pi — > [a] V'i, we have |= ( i/'i for all 
w/ G Ws.t. (w,w') G ^ a , and then |= ; tpi for every w' G W' 
s.t. («;,«;') G R' a \R'%' T . Now, given (io,w/) G R%' T , we 
have |=, © k'eip(s) W a V'a')' and the result follows. 

A'Crt«(«') 

Let ( Vi A A7fen.( W A W )-[ fl ]J. ^(^ A ^)) -> [«]V>i £ 






^^( a )T- 



For every w G W', if 1= Pi A 

1 w 

/\-i}p D] (nA VA )->[a]X -(ttA^a), then w lh p u and as |= ^ -^ 
ffllii»i, we have |= ?fc for all «;' G W s.t. (ui, w') £ R„. Thus 
\^ r ' tpi for every w' G W' s.t. (w, w') e R' a \ R^ T . Now, 

if u> \f p, then Z?^' = and the result follows. Other- 
wise, if w lh p, then T U= (tt A p A ) — > [a]_L, and then 

(^ A Aqp DL ( W A ¥ , A )- > [a]J. ^(^ A ^)) "^ [ fl ]^ has not been 
put in ^n,_,/ a \-r> a contradiction. 

Let now (7r A (/? A A ^) — > [a]l G 7*,^/ a )T- F° r every 
w G W 7 , if (= 7r A w A A ^, then |= £, and then |= ^. From 
(tt A p A A I) -> [ fl ]£ G ?;^ <a)T , we have T f= Dl £ -> [«]L 
or T ^ D| _^ -> [a]-.^ and T f= D| _£ -> [a]£. In both cases, 

|= £ for every w' G R a (w), and then |= ^ for every w' s.t. 
(w,w') G R 1 \ R%' . It remains to show that |= , £ for every 
w' G W 1 s.t (w,w') eR^ T . 

Suppose tfc £. Then -1^ G w 1 \ w. From the construction 
oiJK', there is M" = {W",R") G M s.t. there is (u,«) G 
Rl and -.^ G v\u, i.e., ^ "^ and ^"'-.1. From (u, v) G <, 

we do not have T |=_, £ — > [al_L. From 1= ->£ we do 

1 rUL L ' ' 1) 

not have T |= f — > [a]£. Thus the algorithm has not put 
(tt A p A A £) — > [a]^ in 7* ^/ a \y, a contradiction. ■ 

Proof of Theorem 4 

Lemma 1 Lef <P be a law. IfTis modular and TU {^} |= 
_L, i/zew 7j « modular. 

Proof: Let <P be nonclassical. Suppose T^ is not modular. 
Then there is p' G 5m[ s.t. 7* hpp,^' and 5 W p Ap' , where 
<S is static laws in T%. Suppose T ^ (^'. Then we must 



have 7% b ^<^' 



and 7% b -.y>' -^ (a)T. 



Suppose <?> has the form 93 — > [a]-0, for p, ip G Jml. Then 
for all 93 A -i<// -contexts, as far as 7% |= (pA->p') — > [a]_L, 
(y3 A -.93') -> (a)T ^ 7J. Then 7| hpoL^' if and only if 
5 |= (/?', a contradiction. 

Suppose <P is of the form p — > (fl}T, for (/? G 3m [. Then 
for all </?A-i</?' -contexts such that 7%, |= (pA->p') — > (a)T, 
7j |= (</? A ->^/) — > [fl]_L is impossible as far as £~ has 



been weakened. Then 7%, |= <p' if and only if S \= ip' , a 
contradiction. 

Hence we have T |= ip' . Because <P is nonclassical, 
S = S . Then T |= ip' and S U= ip' ', and hence Tis not 
modular. 

Let now ^ be some ip G 3m[. Suppose 7* is not modular, 
i.e., there is ip" G 5ml s.t. T£ fp D| y and S' = S * ip ^ p| _ 

v". 

From 5 U= ip" , there is i> G val(S ) s.t. u Ij^ ip" . 

If u G va/(«S), as Tis modular, TU g?". From this and 

K bra <?"• we must have ^ N 



T 1= 
9= iPDL 

-nip 



<P 'PDL 



^" 



and 



■up 



(a)T. From the latter, we get T |= 



(a)T, and from the first we have T \= 



PDL 



PDL 



V 



[a]_L. Putting both results together we get T |= ip" . As 
5 U= ip" , we have a contradiction. 

If v ^ va/(<S), then 7*, U= -k/j" — > (a)T, as no ex- 
ecutability for context -up" has been put into 7* Hence 
7* \?k DL ip" , a contradiction. ■ 

Lemma 2 If ^u g = (Wbi g ,Rbi s ) is a model of T, then 

for every ^# = (W, R) such that \= T there is a mini- 
mal (w.r.t. set inclusion) extension R 1 C Ry lg \ R such that 
Jt' = (va/(<S),tf Utf'} is a model of T. 

Proof: See (Varzinczak 2008b). ■ 

Lemma 3 Let Tbe modular, and<l> be a law. Then Tb $ 

if and only if every ^#' = {val(S),R') such that \= ' T 
and R C R' is a model of<P. 

Proof: 

(=>): Straightforward, as T |= <P implies \= 'P for every 

./$, such that p T, in particular for those that are extensions 
of some model of T 

(<S=): Suppose T ^> DL ^- Then there is ^ = (W,R) such 

that |= Tand p <[>. As Tis modular, the big model .^#/,; 8 = 
(Wbig,Rbig) of Tis a model of T Then by Lemma 2 there 
is a minimal extension R' of R w.r.t. R^g such that ^' = 

{val(S),R U R') is a model of T Because p <Z>, there is 

w G W such that p <£. If <?> is some (p G Jtnl or an effect 

law, any extension ^#' of ^# is such that p <P. If <P is 

of the form ip — > (a) T, then |= 09 and R a (w) = 0. As 

any extension of ./# is such that (m, w) G /?' if and only if 
u G va/(<S) \ W, only worlds other than those in Wget a new 

leaving arrow. Thus (R U R') a (w) = 0, and then p <Z>. ■ 

Lemma 4 Lef T fee modular and <P a law. If .M 1 = 

(val(S ),R'} is a model ofT^, then there is Ai = \^M :\= 
7} s.t. j#> G M%. 

Proof: Let Jl' = (val(S'),R'} be such that p^' 7%. If 
|= T the result follows. Suppose p T We analyze each 



Let <P be of the form ip — > [a]ip, for ip, ip G 3ml. Let 
X = {„# : J( = (val(S),R)}. As Tis modular, by 
Lemmas 2 and 3, M. is non-empty and contains only models 
ofT 

Supposed' is not a minimal model of 7*,^r fl i^,, i.e., there 
is ^#" such that M" <M •d' f° r some JeM Then 
^#' and ^#" differ only in the effect of a in a given </>world, 
viz. a 7r A ip& -context, for some n G IP(S A ^) and ip^ = 

)Pi ^ A< ■ e atmM ~Pi sucn that A C atm(ii). 



A 






Because ^= (7T A ip^ ) — > (a)-ttjj, we must have |= 

(7T A ipi) — > (a)-iijj, and then p yj — > [flJV'- Hence ^#' is 
minimal w.r.t. r^. 

When revising by an effect law, 5' = S. Hence tak- 
ing the right R and Rf,^' such that J{ = (val(S),R) 
andR' = R \ Rf'^, for some R%<^ C {(«;,u/) ^ 

09, 1= -ii/' an d (w, w') G ^ fl l, we have ^# G A4 and then 

i w r \ / j 

Let <? have the form os — > (a)T, for tp G 3ml. Let M = 
{^C : ./^ = (val(S),R)}. As Tis modular, by Lemmas 2 
and 3, M is non-empty and contains only models of T 

Suppose that^#' is not a minimal model ofT*i a \^, i.e., 

there is ^#" such that |= 7* i a \ T and ^" <JC -^' for 
some ,^# G jM. Then ^#' and ^#" differ only on the exe- 
cutability of a in a given 09-world, i.e., a ix A pa -context, for 
some 7T G IP(S A oo) and <p A = A^i^ftAA,.,^^, 



Pi^^ 1 



Pi $A 



such that A C atm(n). This means ^#" has no arrow leav- 
ing this 7r A (pA -world. Then |= (n A oja) — > [a]_L, and 
hence p 05 — > («)T. Hence ,/M' is a minimal model of 

When revising by executability laws, S = S. Thus 
taking the right R and a minimal R%' such that ^ = 
(val(S),R) and «' = R U ^f' T , for some Rf' T C 
{(w,ui') :(= 03 and w' G RelTgt(w,ip — > (a)T, ^,M)}, 
we get ^# G A4 and then ./#' G A4* , fl > T . 

Finally, let ^ be some 09 G Jml. Then ./#' is such that 
for every w G W', if R a (w) ^ 0, then w G va/(»S) and 
^a(w) p for every ^# = (W,/f) G A4. Choosing the 
right ^ G M the result follows. ■ 

Proof of Theorem 4 

Let T^ be the output of our algorithms on input theory T 
and law #. If 7% = TU {^}, then TU {<£} ^ DL -U and hence 

every J(' such that |= 7% is such that ^#' G M \ {^# : p 
<?>} and the result follows. 

Suppose TU {«?} |= _L. From the hypothesis that T 
is modular and Lemma 1, T is modular. Then .M' = 
(val(S ),R) is a model of T, by Lemma 2. From this and 
Lemma 3 the result follows. ■ 



